Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
File:                     ycTTQSeR46PplAQFieyK0vWP4xI.mft (raw, json)
Hash identifier:          qoZG7GTbL/R+tt9EvqhTM9EZSFzw6O79QAupltxpQKk=
Subject key identifier:   D8:DC:BA:BD:1A:4D:57:87:AA:33:AD:41:5A:E0:67:8E:A0:59:91:1F
Authority key identifier: C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12
Certificate issuer:       /CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
Certificate serial:       018F9C87363165E5BCC6A1DA79B198662E3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
Manifest number:          1184
Signing time:             Tue 21 May 2024 19:00:57 +0000
Manifest this update:     Tue 21 May 2024 19:00:57 +0000
Manifest next update:     Wed 22 May 2024 19:00:57 +0000
Files and hashes:         1: GoAF_mpYTMRszaDgbKaPin6SaaA.roa (hash: xRjd6gMpFRhx/R8pVpmBJ7FUqiLD9jylbxa99O1f8dw=)
                          2: ycTTQSeR46PplAQFieyK0vWP4xI.crl (hash: tlBJqINWEVUFXQstHtjUz7dcQoNdsMv2yqjpdfQYXVs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 14:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9c:87:36:31:65:e5:bc:c6:a1:da:79:b1:98:66:2e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
        Validity
            Not Before: May 21 19:00:57 2024 GMT
            Not After : May 22 19:00:57 2024 GMT
        Subject: CN=d8dcbabd1a4d5787aa33ad415ae0678ea059911f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:18:16:1b:b8:44:a4:77:2a:ef:65:87:00:82:
                    8f:d2:65:7e:d7:75:12:37:3a:73:9d:27:f2:52:a0:
                    1c:f0:8e:b7:34:a9:8d:1a:6f:0d:f3:bd:03:57:3d:
                    fc:92:6d:0d:33:ae:b0:cb:88:c3:e2:ef:94:86:8e:
                    3c:ee:3e:4a:34:cc:4c:35:13:f9:9e:18:a0:f7:31:
                    64:84:4c:18:23:e4:4d:54:bf:39:e6:c3:2e:ea:7a:
                    fe:5c:a6:ca:36:cd:10:01:01:3d:89:6e:f7:e6:35:
                    2e:b7:4b:66:f3:9e:94:35:5a:d5:e8:0c:a2:f4:5d:
                    86:d6:2b:85:65:10:fa:5c:96:5d:2a:4d:c9:e0:ad:
                    71:bf:b8:76:c8:c2:d6:ad:23:0a:dd:76:fd:36:8f:
                    8f:df:a3:85:b8:c4:25:d6:55:ac:0a:e7:80:24:3c:
                    30:37:52:0a:67:c9:4b:1f:42:d0:d6:96:1d:3e:c3:
                    38:5d:cc:ad:1c:2f:47:73:bf:f2:24:f6:cd:c3:1d:
                    79:8c:f9:49:49:2e:1e:3a:85:fd:8d:0b:2e:0f:cf:
                    b9:b4:8f:3b:ff:44:4a:a2:3d:8d:cf:b5:ee:1e:b4:
                    33:ea:52:a0:5d:e7:52:2b:59:56:63:89:c4:cc:e9:
                    99:71:1e:af:e0:4d:54:82:3e:3c:77:f5:c7:62:e9:
                    0c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DC:BA:BD:1A:4D:57:87:AA:33:AD:41:5A:E0:67:8E:A0:59:91:1F
            X509v3 Authority Key Identifier:
                keyid:C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:48:f1:f1:0c:f2:b2:a6:0b:4d:5b:66:1d:d1:48:48:b7:00:
         c1:71:50:9f:c6:25:a2:85:b6:50:75:65:ea:7d:4c:49:57:ae:
         fb:09:d5:4f:df:42:f6:dd:fe:fd:f1:cd:43:86:be:de:6d:69:
         45:f0:b1:3a:65:bd:50:e6:10:47:2c:e1:6c:f5:13:5c:c0:9f:
         a8:80:18:a2:58:77:c3:1c:a9:d8:9d:24:85:0e:e5:25:bb:ff:
         7d:12:98:1c:df:13:ed:eb:74:56:82:a6:be:98:78:3a:f9:56:
         03:86:bb:4a:24:d6:84:bc:7f:6d:4b:c4:17:8a:d4:13:74:01:
         eb:d0:ec:4f:5b:19:ec:2f:7b:25:f7:47:49:78:7b:ad:86:a5:
         9a:4a:92:be:73:7a:b7:8d:ba:43:92:60:d0:9e:f6:7a:c7:57:
         7e:57:2a:3e:4d:c1:79:24:6f:c8:6a:43:77:5e:5d:29:ba:5d:
         dc:a6:f2:e7:4a:04:a3:6c:b8:ac:aa:d1:e5:74:0b:68:11:b9:
         b8:bb:fd:68:e6:f0:e1:7a:ee:de:cf:80:a2:de:cb:45:1e:15:
         32:19:25:64:22:88:ad:7d:0c:93:34:18:d5:69:f6:b9:24:42:
         16:35:73:54:ab:de:e9:cd:d8:5e:ce:bc:24:66:e7:97:45:70:
         6c:b9:d8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 20:55:53 2024 by rpki-client on console-ams.rpki-client.org